edit permissioning, display relegated to opportunity#show